UTHPC - HPC cluster Rocket is temporarily unavailable due to ongoing security fixes (CVE-2026-46242 and CVE-2026-43499) – Incident details

HPC cluster Rocket is temporarily unavailable due to ongoing security fixes (CVE-2026-46242 and CVE-2026-43499)

Resolved
Major outage
Started 3 months agoLasted 18 hours 24 minutes

Affected

Cluster

Major outage from 6:37 PM to 6:14 AM, Under maintenance from 6:14 AM to 8:42 AM, Major outage from 8:42 AM to 1:02 PM

rocket.hpc.ut.ee

Major outage from 6:37 PM to 6:14 AM, Under maintenance from 6:14 AM to 8:42 AM, Major outage from 8:42 AM to 1:02 PM

ondemand.hpc.ut.ee

Major outage from 6:37 PM to 6:14 AM, Under maintenance from 6:14 AM to 8:42 AM, Major outage from 8:42 AM to 1:02 PM

Services

Major outage from 6:37 PM to 6:14 AM, Under maintenance from 6:14 AM to 8:42 AM, Major outage from 8:42 AM to 11:04 AM, Operational from 11:04 AM to 1:02 PM

galaxy.hpc.ut.ee

Major outage from 6:37 PM to 6:14 AM, Under maintenance from 6:14 AM to 8:42 AM, Major outage from 8:42 AM to 11:04 AM, Operational from 11:04 AM to 1:02 PM

Updates
  • Resolved
    UTC
    Resolved

    HPC services are restored. Access to the UT Rocket cluster and Galaxy, Open OnDemand, and their services RStudio and Jupyter have been fully restored.

    The previously identified Linux kernel vulnerabilities have been addressed, and users can once again access the Rocket login nodes as usual and submit new jobs to the compute nodes.

  • Update
    UTC
    Update

    We are closing login nodes access again. The Rocket cluster is continuously not available. We expect the cluster to remain unavailable for most of the day. We apologize for the inconvenience and will provide updates as they become available.

  • Identified
    UTC
    Identified

    Due to the same security vulnerability, all SAPU machines are currently unavailable while security patches are being applied. We expect service to be restored later tonight. Thank you for your patience.

  • Monitoring
    UTC
    Monitoring

    We have applied the security patches to mitigate the vulnerability. The login nodes are now accessible; however, job submission remains disabled while we complete additional validation and testing. We require more time to ensure the cluster is fully stable before restoring normal operation.

    We appreciate your patience.

  • Investigating
    UTC
    Investigating

    Due to recently identified Linux kernel vulnerabilities (CVE-2026-46242 and CVE-2026-43499), we have temporarily disabled access to the UT HPC Rocket cluster as a precautionary measure to mitigate potential security risks.

    Currently, access to login nodes is unavailable. Also, new job submissions are temporarily disabled.

    Jobs that were already running before the access restrictions were applied continue to run and are not affected.

    Our system administrators are working to restore full service as quickly as possible. 

    Thank you for your patience!